mathieu-benoit / myakscluster

How to setup a secure Kubernetes cluster on Azure

http://alwaysupalwayson.com/private-aks-and-acr/

Managed Identity

mathieu-benoit opened this issue 5 years ago · comments

Mathieu Benoit commented 5 years ago

Leveraging Managed Identity with AKS instead of Service Principal is more secure for 2 main reasons:

There is not anymore the credentials file stored on any AKS nodes (/host/etc/kubernetes/azure.json)
MI will wrap and managed the credentials (auto-rotate, when expired, etc.) for you

Mathieu Benoit commented 5 years ago

Mathieu Benoit commented 5 years ago

Mathieu Benoit commented 5 years ago

There is an issue currently Azure/azure-cli#12864

Mathieu Benoit commented 4 years ago